planet
join:2001-11-05
Olmsted Falls, OH
 ·Cox HSI
|  wallwatcher log
I was wondering if anyone else has had this problem with their WW logging. This just started yesterday after I applied the IE cumlative update patch from WU so I don't know if it has anything to do with this. My WW log shows the wrong name of the IP address it is connecting to. I realized this when BOClean connected for an update with the wrong name. Kinda freaked me out that I was getting a remote ftp connection from a site for no reason then I copied the IP into my browser and NSClean popped up. Rebooted a couple times and the correct name was back for nsclean. Today though when I ran liveupdate a bogus name shows up... |
|
Dan Tseng
join:2001-04-01
Los Angeles, CA
| WallWatcher resolves IP addresses into URL's (names) and vice versa by asking Windows to find the answer. Usually, that's done by querying your ISP's NameServer. Once WW has an answer, it saves it for future short-term use, to reduce overhead and delays.
Many URL's resolve to multiple IP's, because large organizations such as Symantec use multiple servers to spread the load. So, you'll often see different IP addresses for the same 'name'.
From your question, I can't tell whether either of the above explains the situation, nor whether you're only seeing this with WallWatcher or with other programs as well.
--
Dan Tseng (WallWatcher author) |
|
planet
join:2001-11-05
Olmsted Falls, OH
·Cox HSI
| Thanks for the quick reply Dan and for a great program. I rely on it always to let me know where things are going and coming from. Was confused though regarding the NSClean IP that was logged wrong. I believe it was a clitch for whatever reason. Hopefully, that won't reoccur.
I jumped the gun I think regarding Symantec. My take on that now is that Symantec might have embedded external sites for tracking purposes??? I've noticed similarities when logging onto a yahoo site. For example, c.myspace.com, or something with ysing.com in it and also something.amazon.com. When I ran liveupdate today on NAV I saw the myspace and the ysing sites being connected via my router. I'm not at home right now; otherwise, I'd provide the IP addresses to those sites. If I remember correctly they are all similar, something like 84.153.144.22. Only the last segment of the IP address changes. I'll clean this IP address up when I'm next logged onto my computer at home and I can look at my logs. |
|
